MISP Sync — Two-Way IOC Synchronization
Two-way synchronization with MISP instances: events, IOCs, galaxies and tags, with automatic mapping onto the platform’s data model.
Overview
TLP and sharing group controls are preserved in both directions, so the organization’s sharing policy is always respected.
Capabilities
- Two-way sync of events and IOCs
- Automatic MISP ↔ OODA mapping
- TLP and sharing groups honoured
- Scheduling and incremental sync
- Duplicate resolution
Use Cases
- Sharing IOCs with communities and ISACs
- Importing MISP feeds for enrichment
- Synchronizing events between instances
- Federating threat intel across organizations
Integrations
- MISP (galaxies, taxonomies)
- OODA Threat Intel / Investigate
SLA & Guarantees
Incremental sync · TLP enforcement